SecureMint

PPAP Alternative for Japanese SMBs: Free, No Install

Japan's Cabinet Office abolished PPAP internally in November 2020, and major Japanese companies have followed. But most PPAP-replacement articles recommend enterprise-tier solutions — Box, Proself, GigaCC — that require paid contracts and IT setup. Japanese SMBs and solo proprietors need something they can adopt today, for free, without installing anything. SecureMint fills that gap: zero-knowledge, browser-only, $0 to start, and the recipient needs nothing except a browser.

SecureMint uses zero-knowledge design. The server cannot read your data.

Drag & Drop

Steps

1

Share this article with your team and IT contact

Use this page as the justification: it cites the 2020 Cabinet Office abolishment, IPA warnings, and Microsoft Defender blocking encrypted attachments. No internal deck needed.

2

Open securemint.app/send from any browser

Chrome, Edge, Safari, Firefox — all work. No company IT approval for an install because nothing is installed.

3

Replace your PPAP flow: upload, set a password, get the link

This takes fewer clicks than PPAP. Old: zip → password → attach → 2nd email with password. New: drop file → set password → copy link → paste in one email, tell password by phone.

4

Upgrade only if you need audit logs or larger files

The free tier covers most SMB use cases. Pro (¥480/month) adds download logs (audit trail for ISMS/Pマーク), 5 GB files, and longer retention.

Why It's Secure

  • Japan's Cabinet Office officially abolished PPAP in November 2020 — cite this when challenged.
  • IPA (Information-technology Promotion Agency) has published repeated warnings about PPAP and Emotet.
  • Microsoft 365 Defender increasingly blocks password-protected archives outright.
  • Pro plan's download logs are sufficient for Pマーク (Privacy Mark) and ISMS audit trail requirements.

FAQ

We have no IT department. Can we really use this without help?
Yes. There is nothing to install, configure, or maintain. If you can send a WeTransfer link, you can use SecureMint — with stronger security and without the WeTransfer subscription.
Does the recipient need to install anything?
No. They click the link and decrypt in their browser. Works on Windows, Mac, iPhone, Android — no account, no plugin, no app.
How do I satisfy an audit that asks for evidence of file-sharing controls?
Pro plan provides per-link download logs with timestamps and IPs. Combined with the ability to set expiry and download limits, this is evidence of access control for Pマーク and ISMS audits.